Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133312e3136312e3235322e302f32342d3234203d3e203238313033.roa
File:                     3133312e3136312e3235322e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          XQZxnIgYEyaeHDtYKLHxVMibXQaQoZPHN6XP/Tzo5mw=
Subject key identifier:   6D:70:81:4A:63:AA:2A:68:93:4B:38:54:A7:C5:00:FD:55:CE:61:69
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       592B06A8C515C0A01F10A42CEA8BF085F4935E23
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133312e3136312e3235322e302f32342d3234203d3e203238313033.roa
Signing time:             Mon 15 Jun 2026 13:47:49 +0000
ROA not before:           Mon 15 Jun 2026 13:42:49 +0000
ROA not after:            Mon 14 Jun 2027 13:47:49 +0000
asID:                     28103
IP address blocks:        131.161.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 07:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2b:06:a8:c5:15:c0:a0:1f:10:a4:2c:ea:8b:f0:85:f4:93:5e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jun 15 13:42:49 2026 GMT
            Not After : Jun 14 13:47:49 2027 GMT
        Subject: CN=6D70814A63AA2A68934B3854A7C500FD55CE6169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:90:f0:35:0a:00:45:49:f8:f1:11:e3:3b:
                    6f:94:0a:f3:28:96:6e:04:71:e4:bc:cd:6c:cb:85:
                    79:16:14:53:20:4a:76:8f:e6:9b:e3:58:dd:8d:a6:
                    49:b1:24:4a:f1:62:42:be:42:29:ca:cf:f4:4a:d2:
                    eb:90:c8:51:b2:19:48:da:2f:01:86:65:5a:4a:07:
                    70:aa:31:12:62:5d:d7:f6:e9:df:bd:f5:bf:24:6d:
                    d7:24:5f:14:ca:ab:c1:a9:98:3e:f9:cd:30:c0:bb:
                    b7:27:61:1a:46:1f:a9:23:bf:a3:91:78:8a:e9:39:
                    72:be:2c:d4:b9:7b:80:91:d2:5a:89:f0:9a:05:f1:
                    6d:79:a2:24:72:8f:7b:6c:8f:f3:27:9f:03:ec:4f:
                    b4:7d:10:e3:5f:e6:74:9b:5e:67:ee:03:8a:2c:83:
                    ac:a8:cc:42:8f:b9:90:e4:53:1e:c8:04:16:7f:8c:
                    0a:51:ec:13:08:a1:6a:af:78:f7:f1:90:c1:5a:21:
                    68:3c:09:6b:ae:38:db:fe:09:e1:87:97:ae:17:3d:
                    9c:1a:13:fa:39:2a:72:f5:ca:87:28:f9:f3:ee:a8:
                    cd:4b:95:b9:4d:44:9b:46:27:d1:79:ca:14:a8:c4:
                    eb:b8:0e:43:57:ba:96:b2:cf:e9:a4:70:ad:08:d1:
                    1c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:70:81:4A:63:AA:2A:68:93:4B:38:54:A7:C5:00:FD:55:CE:61:69
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3133312e3136312e3235322e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:64:46:fa:8f:8a:34:95:26:f1:e7:85:dc:7c:41:c5:58:50:
         0a:a1:80:2c:b3:cc:4b:e4:5f:e5:e7:6c:df:0a:3d:70:75:93:
         81:fe:83:11:95:50:b6:74:c6:5a:d1:0c:a6:4d:5f:2d:c8:a3:
         b1:ab:ca:62:ce:c5:e8:43:c9:c1:0e:ca:99:fd:95:27:44:0b:
         a7:4c:f6:3d:07:bf:69:88:40:4b:e1:2c:bd:6b:f6:c8:08:9f:
         33:8f:94:8c:d6:62:46:c4:27:84:c9:0a:d7:7a:2a:93:df:46:
         3e:75:77:e3:c1:26:65:29:08:49:bc:f7:0b:35:97:8a:ed:66:
         29:3e:16:3d:d2:19:28:4b:77:e2:96:01:a7:8d:6a:c1:22:1c:
         cc:1c:6a:56:15:81:92:2e:73:f6:e6:d8:34:cb:36:ec:86:c8:
         49:ad:ea:67:41:8b:9a:d4:77:6c:0c:a2:ec:87:54:53:5c:7c:
         07:64:01:ae:ac:cd:a4:83:d9:dd:aa:83:d0:cb:27:ab:7f:25:
         60:1b:a7:5e:87:0d:74:a8:e7:a3:c3:cc:de:24:23:49:ed:6b:
         c8:55:08:ae:27:84:f6:1a:22:a1:7a:4d:ee:58:4f:46:7d:04:
         45:71:5c:cc:3a:1d:58:af:b7:db:2d:d8:e4:dd:95:5e:52:15:
         0e:e5:ce:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:05:46 2026 by rpki-client